b7f84eff57d5c71ba8fc1233481fa53b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7f84eff57d5c71ba8fc1233481fa53b_JaffaCakes118
Size

2.3MB
MD5

b7f84eff57d5c71ba8fc1233481fa53b
SHA1

76c882abd0aebb0fc41cef7175e6fa2c64309ea1
SHA256

4de705075960d6e22922ad66d5de020a928a7e9ae847a779669667307107c35f
SHA512

061e62681523249c2fca7d6e2cf867482398ee02a9f2e3e5e1a8fa830934f9529795d959cc7ae209f5b22d7341abb52ccf5c73d6f76efee643533d97e94c24db
SSDEEP

12288:Un+FeIhOYK4FexLejJuY6lnUiZ/8e++hIAD1nRWWx5e0DVekvj5B4e6EXeUfpIBV:kKebEeRQJubZDbStFxdGm5Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7f84eff57d5c71ba8fc1233481fa53b_JaffaCakes118

Files

b7f84eff57d5c71ba8fc1233481fa53b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

HyperElk.pdb

Imports

mscoree

_CorExeMain

Sections

>0&YZJ
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ